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AMENDMENTS TO CT .ATMS 

The following T.isting of riaims will replace all prior versions and listings of claims in the 
application. 

1 . (Currently Amended) A method encrypting characters from a data element in a 
database, the method comprising: 

reading information identifying a data type associated with data in a particular coliimn of 
the database from a location in the database, the location being outside the particular column; 

reading a data element from the particular column, the data element including a first 
character string; 

forming a restricting character set on the basis of the data type and on at least nne data 
element attribute; 

encrypting the first character string into a second character string, each character in the 
second character string being selected from the restricting character set; and 

storing the second character string at the particular column of the first character string in 
the database. 

2. (Original) A method according to claim 1, comprising the further step of: 
arranging one or more character sets in a pattem for a data type. 

3. (Previously Presented) A method according to claim 1, wherein the number of 
characters in the second character string is equal to the number of characters in the first character 
string. 
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4. (Previously Presented) A method according to claim 1, comprising the further steps 

of: 

converting each character of said first character string to an index value; and adding a 
varying value to each index value before encryption. 

5. (Previously Presented) A method according to claim 4, wherein the varying value is 
obtained by the steps of: 

creating an initial value by hashing an encryption key; 

adding adjacent index values pairwise fi"om the left to the right using said initial value 
when adding the leftmost character. 

6. (Original) A method according to claim 1, wherein the encryption is performed using 
the DES algorithm in stream cipher mode. 

7. (Currently Amended) A system for encrypting characters fi-om a data element in a 
relational database, the system comprising: 

means for reading information identifying a data type associated with data in a particular 
column of the database from a location in the database, the location being outside the particular 
column; 

reading means for reading a data element from the particular column, the data element 
including a first character string; 

interpretation means for forming a restricting character set on the basis of the data type 
and on at least one data element attribute; 

encryption means for encrypting said first character string into a second character string, 
each character in the second character string being selected from the restricting character set; and 

a database for storing the second character string at the particular column of the first 
character string in the database. 
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8. (Cancelled) 

9. (Cancelled) 

10. (Cancelled) 

11. (Cancelled) 

12. (Currently Amended) A method for storing encrypted data in a database structured 
for the storage of un-encrypted data, said method comprising the steps of: 

reading information identifying a data type associated with a data element in a particular 
column of the database from a location in the database, the location being outside the particular 
column and said data element including a first character string; 

forming a restricting character set on the basis of the data type and nn at least one data 

element attrihnte ; 

encrypting the first character string into a second character string, each character in the 
second character string being selected from the restricting character set; 

wherein said encrypting includes controlling the encrypting process so that the ciphertext 
corresponding to the encrypted data element satisfies restrictions provided in the database for 
storage of data for the determined data type; and 

storing the second character string at the particular column of the first character string in 
the database. 
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13. (Previously Presented) The method of claim 12, wherein said controlling includes 
controlling the encrypting process based on the information identifying a data type associated 
with data to be stored in a particular column of the database from the location being outside the 
particular column; and wherein said storing includes storing the encrypted data in the particular 
column. 



14. (Cancelled) 



15. (Cancelled) 



